Skip to content

Commit 992cc51

Browse files
committed
Ruby: Minor changes to InsecureDownload
1 parent f35379b commit 992cc51

File tree

2 files changed

+4
-4
lines changed

2 files changed

+4
-4
lines changed

ruby/ql/lib/codeql/ruby/security/InsecureDownloadCustomizations.qll

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -71,7 +71,7 @@ module InsecureDownload {
7171
}
7272

7373
/**
74-
* A HTTP or FTP url.
74+
* A HTTP or FTP URL.
7575
*/
7676
class InsecureUrl extends DataFlow::Node {
7777
string str;
@@ -99,8 +99,8 @@ module InsecureDownload {
9999
* A string containing a sensitive file extension,
100100
* seen as a source for downloads of sensitive files through an insecure connection.
101101
*/
102-
class SensitiveFileUrl extends Source {
103-
SensitiveFileUrl() { hasUnsafeExtension(this.asExpr().getConstantValue().getString()) }
102+
class SensitiveFileName extends Source {
103+
SensitiveFileName() { hasUnsafeExtension(this.asExpr().getConstantValue().getString()) }
104104

105105
override DataFlow::FlowState getALabel() { result instanceof Label::Sensitive }
106106
}

ruby/ql/lib/codeql/ruby/security/InsecureDownloadQuery.qll

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
/**
2-
* Provides a taint tracking configuration for reasoning about download of sensitive file through insecure connection.
2+
* Provides a dataflow configuration for reasoning about the download of sensitive file through insecure connection.
33
*
44
* Note, for performance reasons: only import this file if
55
* `InsecureDownload::Configuration` is needed, otherwise

0 commit comments

Comments
 (0)